Juniper Networks J-Series manual

J-series™ Services Router Administration Guide

198■ Rebooting or Halting a Services Router

Image 220

Juniper Networks J-Series manual

Contents

Administration Guide North Mathilda Avenue Sunnyvale, California Series Services Router Administration Guide Iii End User License AgreementPage Abbreviated Table of Contents Series Services Router Administration Guide Table of Contents Using the telnet Command Using the ssh Command Modifying USB Modem Initialization CommandsViii Table of Contents Management Information Base Verifying Autoinstallation Status Configuring Autoinstallation with a Configuration EditorEvent Policy Overview Configuring Event Policies Part Monitoring a Services Router Part Managing Services Router Software Part Diagnosing Performance and Network Problems Xiii Part Index About This Guide ObjectivesAudience Objectives How to Use This Guide Xvi How to Use This GuideLocation of J-series Information Series Tasks Location of Instruction On page xvii defines the notice icons used in this guide Document ConventionsText and Syntax Conventions Related Juniper Networks Documentation Web GUI Conventions Getting Started Guide for Your Router Series Guides and Related Junos Software PublicationsRelated Juniper Networks Documentation Chapter in a J-series Guide Series Services Router Administration GuideXx Related Juniper Networks Documentation Requesting Technical Support Documentation FeedbackDocumentation Feedback Opening a Case with Jtac Xxii Requesting Technical Support Configuring a Services Router for Administration Configuring a Services Router for AdministrationPage User Authentication Terms Managing User Authentication and AccessSystem Management Terms User Authentication Overview User AuthenticationUser Authentication Overview User Accounts Predefined Login Classes Login ClassesPermission Bits Permission Bits for Login Classes Denying or Allowing Individual Commands Template Accounts Managing User Authentication with Quick Configuration Adding a Radius Server for AuthenticationTo configure a Radius server with Quick Configuration Before You Begin Adding a TACACS+ Server for Authentication To configure a TACACS+ server with Quick ConfigurationUsers Quick Configuration for Radius Servers Summary Radius Server Configuring System Authentication To configure system authentication with Quick ConfigurationUsers Quick Configuration for TACACS+ Servers Summary TACACS+ Server To configure users with Quick Configuration Add a User Quick Configuration Page SummaryAdding New Users User Information Setting Up Radius Authentication Managing User Authentication with a Configuration EditorManaging User Authentication with a Configuration Editor Setting Up TACACS+ Authentication Setting Up Radius Authentication Setting Up TACACS+ Authentication 172.16.98.24Set tacplus-server address Tacacssecret1 Configuring Authentication Order Configuring Authentication OrderInsert system authentication-order radius After password Controlling User Access Defining Login ClassesDefining Login Classes EditEdit Configuration Operator-and-boot with Operator-and-bootRequest system reboot Creating User Accounts Setting Up Template Accounts ConfigurationViewCreating User Accounts Set user cmartin class superuser Creating a Remote Template Account Creating a Remote Template Account Creating a Local Template Account Creating a Local Template Account Recovering the Root Password Recovering the Root Password Ok boot -s Securing the Console Port Securing the Console Port Using the telnet Command Accessing Remote Devices with the CLISecuring the Console Port CLI telnet Command Options Using the ssh CommandCLI ssh Command Options Configuring Password Retry Limits for Telnet and SSH Access Configuring Password Retry Limits for Telnet and SSH Access Configuring Password Retry Limits for Telnet and SSH Access ConfigurationView and EditEdit ConfigurationEdit system login retry-options Set backoff-thresholdPage USB Modem Terms Setting Up USB Modems for Remote ManagementUSB Modem Terms USB Modem Interfaces USB Modem OverviewUSB Modem Terminology How a Services Router Initializes USB Modems Series Default Modem Initialization CommandsSetting Up USB Modems for Remote Management Modem Command Description S7=45 USB Modem Connection and Configuration Overview USB Modem Connection and Configuration OverviewOn the Services Router At the User End Configuring a USB Modem Interface Required Connecting the USB Modem to the Services Routers USB PortTo configure a USB modem interface for the Services Router Configuring a USB Modem Interface ConfigurationView EditEdit ConfigurationEdit interfaces umd0 S0=0 V1 X4 &C1 E0 Q0 &Q8 %C0 Configuring a Dialer Interface Required Adding a Dialer Interface to a Services Router Configuring Dial-In Required Edit unit172.20.10.2 172.20.10.1 To configure Chap on the dialer interface Configuring Chap on Dialer Interfaces OptionalConfiguring the Dialer Interface for Dial-In Configuring Chap on Dialer Interfaces Ppp-options chap hierarchy level Web Configuration EditorEdit access Edit interfaces dl0 unit Connecting to the Services Router from the User End Configuring a Dial-Up Modem Connection at the User EndConnecting to the Services Router from the User End USB-modem-connect-and then click Next Connecting to the Services Router from the User End Administering USB ModemsAdvanced TCP/IP Settings page appears Administering USB Modems Modifying USB Modem Initialization Commands Modifying USB Modem Initialization Commands Resetting USB Modems Verifying the USB Modem ConfigurationModifying USB Modem Initialization Commands Configure Verifying a USB Modem Interface Verifying a USB Modem Interface Verifying Dialer Interface Configuration Verifying Dialer Interface Configuration Setting Up USB Modems for Remote Management Series Services Router Administration Guide Snmp Architecture Configuring Snmp for Network ManagementSnmp Architecture Management Information Base Snmp Communities Configuring Snmp for Network Management Snmp TrapsSpoofing Snmp Traps Snmp Health Monitor Configuring Snmp with Quick Configuration To configure Snmp features with Quick Configuration Snmp Quick Configuration Summary IdentificationCommunities Traps Health Monitoring Checks the following key indicators Configuring Basic System Identification Configuring Snmp with a Configuration EditorDefining System Identification Information Required Configuring Snmp Agents and Communities Required Set descriptionSet name name Select Engine id Configuring Snmp Agents and Communities Managing Snmp Trap Groups Required Controlling Access to MIBs Optional Configuring Snmp Trap GroupsSelect the Authentication , Chassis , Click Categories Verifying Snmp Agent Configuration Verifying the Snmp ConfigurationConfiguring Snmp Views Verifying Snmp Health Monitor Configuration Verifying Snmp Health Monitor Configuration Series Services Router Administration Guide Configuring Snmp for Network Management Page Dhcp Terms Configuring the Router as a Dhcp ServerDhcp Terms Dhcp Overview Dhcp Terms Compatibility with Autoinstallation Conflict Detection and ResolutionConfiguring the Router as a Dhcp Server Dhcp Options Configuring the Dhcp Server with Quick Configuration Dhcp Quick Configuration Main Configuring the Dhcp Server with Quick Configuration Dhcp Quick Configuration Pool To configure the Dhcp server with Quick Configuration Dhcp Quick Configuration Static Binding Dhcp Server Quick Configuration Pages Summary Dhcp Pool InformationLease Time Server Information Boot Options Dhcp Static Binding Information Configuring the Dhcp Server with a Configuration Editor Sample Dhcp Server Configuration SettingsSettings Sample Value or Values Dhcp Subnet Configuration Dhcp MAC Address Configuration Configuring the Dhcp Server Entry Displaying a Dhcp Server Configuration Verifying a Dhcp Server ConfigurationIp address Verifying the Dhcp Binding Database Verifying the Dhcp Binding Database Verifying Dhcp Server Operation Verifying Dhcp Server Operation User@host ping Displaying Dhcp Statistics Displaying Dhcp StatisticsPage Configuring Autoinstallation Autoinstallation TermsAutoinstallation Terms Autoinstallation Supported Autoinstallation Interfaces and Protocols Autoinstallation OverviewHost-specific configuration Typical Autoinstallation Process on a New Services Router Configuring Autoinstallation Before You Begin Configuring Autoinstallation with a Configuration Editor Configuring Autoinstallation with a Configuration Editor Verifying Autoinstallation Verifying Autoinstallation StatusConfiguring Autoinstallation ConfigurationView and Edit Edit Configuration Verifying Autoinstallation Status Page Automating Network Operations and Troubleshooting Commit Script Overview Enabling Commit Scripts Var/db/scripts/commit directory Disabling Commit Scripts Commit the configurationEnabling Commit Scripts Operation Script Overview Enabling Operation Scripts Executing Operation ScriptsVar/db/scripts/op directory Enabling Operation Scripts Running Self-Diagnostics with Event Policies Running Self-Diagnostics with Event PoliciesDisabling Operation Scripts Configuring Event Policies Event Policy Overview Configuring Event Policies Configuring Destination for Uploading Files for AnalysisConfigure or Edit Configuring Event Policy Edit then execute-commands Set output-filename config.txt output-format textExecute the show interfaces Set then Set raise-trapPage Monitoring a Services Router Monitoring a Services RouterPage Monitoring the Router and Routing Operations Monitoring TermsMonitoring Overview Series Monitoring Terms Monitoring Tools Overview Monitor Option FunctionSystem Chassis Routing Web Monitor Options and Corresponding CLI show CommandsCoS Corresponding CLI Commands Interfaces-show mpls interface Show services nat poolIPSec Rsvp Sessions-show rsvp session Show services rpm probe-results Filtering Command OutputPPPoE User@host show configuration match address Using the Monitoring Tools Monitoring System PropertiesShow system uptime Show system users Show system storage Summary of Key System Properties Output Fields Set system hostname command Name-server commandSet system time-zone command Users CPU Usage Show system processes commands Monitoring System Process InformationSummary of System Process Information Output Fields System Storage Monitoring the Chassis Alarm SummarySummary of Key Chassis Output Fields Field Values Environment InformationFailed Absent Monitoring the Interfaces FPC Summary Interface Summary Summary of Key Interfaces Output FieldsDown Monitoring Routing Information MTU Show route terse Show route detail Monitoring Route InformationSummary of Key Routing Information Output Fields Monitoring BGP Routing Information Show bgp summary Show bgp neighborSummary of Key BGP Routing Output Fields BGP Summary Down to Up BGP Neighbors Monitoring Ospf Routing Information Summary of Key Ospf Routing Output FieldsOspf Neighbors Ospf Interfaces Monitoring RIP Routing Information Show rip statistics Show rip neighborsSummary of Key RIP Routing Output Fields Ospf Statistics Monitoring DLSw Routing Information Summary of Key DLSw Routing Information Output FieldsRIP Neighbors DLSw Capabilities DLSw Circuits DLSw Peers Monitoring Class-of-Service Performance Show class-of-serviceShow class-of-service interface interface Monitoring CoS Interfaces Show class-of-service classifier Monitoring CoS ClassifiersSummary of Key CoS Interfaces Output Fields Summary of Key CoS Classifier Output Fields Show class-of-service code-point-aliases Monitoring CoS Value Aliases Show class-of-service drop-profile Monitoring CoS RED Drop ProfilesSummary of Key CoS Value Alias Output Fields Summary of Key CoS RED Drop Profile Output Fields Show class-of-service forwarding-class Monitoring CoS Forwarding Classes Show class-of-service rewrite-rules Monitoring CoS Rewrite RulesSummary of Key CoS Forwarding Class Output Fields Summary of Key CoS Rewrite Rules Output Fields Monitoring CoS Scheduler Maps Show class-of-service scheduler-mapSummary of Key CoS Scheduler Maps Output Fields Monitoring Mpls Traffic Engineering Information Monitoring Mpls Interfaces Monitoring Mpls LSP InformationShow mpls interface Show mpls lsp Show mpls lsp statistics Monitoring Mpls LSP StatisticsTransit Monitoring Rsvp Session Information Show rsvp sessionSummary of Key Rsvp Session Information Output Fields Summary of Key Mpls LSP Statistics Output Fields Show rsvp interface Monitoring Mpls Rsvp Interfaces InformationSummary of Key Rsvp Interfaces Information Output Fields Monitoring Service Sets Static bandwidth X subscription factor Service Set Summary Summary of Key Service Set Output FieldsMonitoring Firewalls Monitoring Stateful Firewall Statistics Summary of Key Stateful Firewall Statistics Output Fields Summary of Key Stateful Firewall Filters Output Fields Monitoring Stateful Firewall FiltersBytes IDS Search-Narrowing Characteristics Monitoring Firewall Intrusion Detection Services IDSNarrow Search Box Entry or Selection Monitoring IPSec Tunnels On page 140 summarizes key output fields in IPSec displaysSummary of Key Firewall IDS Output Fields Summary of Key IPSec Output Fields IPSec Statistics AH+ESPIKE Security Monitoring NAT Pools Hmac-sha1 Show services nat pool Monitoring DhcpOn page 143 summarizes key output fields in NAT displays Summary of Key NAT Output Fields Dhcp Conflicts Dhcp Statistics Show services rpm probe-results Monitoring RPM ProbesOn page 145 summarizes key output fields in RPM displays Summary of Key RPM Output Fields RTT Round-Trip Time for a Probe Monitoring PPP Cumulative Jitter for a Probe Summary of Key PPPoE Output Fields Monitoring PPPoEPPPoE Interfaces PPPoE Statistics PPPoE Version Monitoring the TGM550 Media Gateway VoIP Dynamic Call Admission Control Information Summary of Key Media Gateway Information Output FieldsTelephony Gateway Module Information DSP Page System Log Message Terms Monitoring Events and Managing System Log FilesSystem Log Message Terms System Log Messages Overview System Log Facilities and Severity Levels System Log Message DestinationsSystem Logging Facilities Regular Expressions System Logging Severity Levels Common Regular Expression Operators and the Terms They Match Regular Expression Operator Matching Terms Configuring System Log Messages with a Configuration Editor Sending System Log Messages to a FileSending System Log Messages to a File Edit system syslog Sending System Log Messages to a User Terminal Archiving System LogsSending Messages to a User Terminal Set user frank any critical Disabling System Logs Monitoring System Log Messages with the J-Web Event ViewerFiltering System Log Messages Filtering System Log Messages CLI command-show system processes Installation and Upgrade Guide Viewing System Log Messages Viewing System Log Messages Configuring and Monitoring Alarms Alarm Terms Alarm Overview Alarm TypesAlarm Terms Interface alarm Alarm Severity Alarm ConditionsInterface Alarm Conditions Configuring and Monitoring Alarms Interface Alarm Conditions Pic-hold-reset Pic-resetHw-down Linkdown Chassis Alarm Conditions and Corrective Actions Component Alarm Conditions Chassis Alarm Conditions and Corrective ActionsCorrective Action Alarm Severity Configuring Alarms with a Configuration Editor System Alarm Conditions and Corrective ActionsSystem Alarm Conditions and Corrective Actions Alarm Type Alarm Condition Corrective Action Configuring Interface Alarms Checking Active Alarms Show chassis alarms Show system alarmsOn page 174 summarizes the output fields on the alarms Summary of Key Alarm Output Fields Verifying the Alarms Configuration Displaying Alarm ConfigurationsTo verify alarms configuration, perform the following task Edit User@host# show chassis alarms t3 Displaying Alarm Configurations Managing Services Router Software Managing Services Router SoftwarePage Upgrade and Downgrade Overview Performing Software Upgrades and RebootsUpgrade and Downgrade Overview Upgrade Software Packages Recovery Software Packages Secondary Storage Devices for Backup Downloading Software Upgrades from Juniper NetworksPerforming Software Upgrades and Reboots Installing Software Upgrades from a Remote Server Installing Software Upgrades with the J-Web InterfaceInstalling Software Upgrades with the J-Web Interface Install Remote Summary Installing Software Upgrades by Uploading FilesUpload Package Summary Installing Software Upgrades with the CLI Installing Software Upgrades with the CLIUser@host request system software add unlink no-copy source Var/tmp/junos-j-series8.5R2.1.tar.gz Downgrading the Software Downgrading the Software with the J-Web InterfaceDowngrading the Software with the CLI Downgrading the Software Configuring Boot Devices User@host request system rebootConfiguring Boot Devices User@host request system software rollback Click OK Snapshot Summary Partitions the boot medium Configuring a Boot Device for Backup with the CLI CLI request system snapshot Command Options Root-size size Option Description PartitionSwap-size size Why Compact Flash Recovery Might Be Necessary Recovering Primary Boot DevicesCLI set system dump-device Command Options Recommended Recovery Hardware and Software Configuring Internal Compact Flash RecoveryRecommended Recovery Hardware and Software Recovery Hardware \ physdiskwrite -u junos-jseries-7.0-20041028.0-export-cf512 Rebooting or Halting a Services Router Rebooting or Halting a Services Router CLI Request System Reboot Command Options Rebooting a Services Router with the CLIOption Description Halting a Services Router with the CLI CLI Request System Halt Command Options This option is a synonym for the at + minutes option Page Managing Files Cleaning Up FilesManaging Files with the J-Web Interface Downloading Files Managing Files with the J-Web Interface Deleting the Backup Software Image Cleaning Up Files with the CLIDeleting the Backup Software Image Managing Files Managing Accounting Files Managing Accounting Files Encrypting and Decrypting Configuration Files Encrypting and Decrypting Configuration FilesGz.jc-for example, juniper.conf.gz.jc Encrypting Configuration Files Request system set-encryption-key CommandsCLI Command Description For example Decrypting Configuration Files To begin the encryption process, commit the configurationTo begin the decryption process, commit the configuration Modifying the Encryption Key At the second prompt, reenter the new encryption key Diagnosing Performance and Network Problems Diagnosing Performance and Network ProblemsPage Diagnostic Terms Using Services Router Diagnostic ToolsSeries Diagnostic Terms Web Diagnostic Tools Overview Diagnostic Tools OverviewWeb Interface Diagnose and Manage Options CLI Diagnostic Commands Overview Manage Options CLI Diagnostic Command Summary Diagnosis and Troubleshooting Command Function Start Mpls Connection CheckingOptions for Checking Mpls Connections Quit Locate LSP using Ping LSP to Layer Ping mpls l3vpnVPN prefix Interface name Instance to which this Mpls Enabled General PreparationPing Mpls Preparation Loopback Address Using the J-Web Ping Host Tool Pinging Hosts from the J-Web InterfaceWeb Ping Host Field Summary Pinging Hosts from the J-Web Interface Ping Host Results Ping Host Results and Output Summary Web Ping Host Results and Output SummaryPing Host Result Icmpseq=0 Icmpseq=number Checking Mpls Connections from the J-Web Interface Using the J-Web Ping Mpls ToolChecking Mpls Connections from the J-Web Interface Ping LDP-signaled LSP Locate LSP using interface nameWeb Ping Mpls Field Summary Ping LSP to Layer 3 VPN prefix Instance to which this connection belongs Locate LSP from interface nameLocate LSP from virtual circuit information Ping end point of LSP Ping Mpls Results and Output Web Ping Mpls Results and Output SummaryField Description Time Using the J-Web Traceroute Tool Tracing Unicast Routes from the J-Web InterfaceTo use the traceroute tool Tracing Unicast Routes from the J-Web Interface Traceroute Traceroute Field Summary Traceroute Results and Output Summary Web Traceroute Results and Output Summary Using J-Web Packet Capture Capturing and Viewing Packets with the J-Web InterfaceTo use J-Web packet capture Capturing and Viewing Packets with the J-Web Interface Ge-0/0/0 Packet Capture Field SummaryAdvanced Options Addresses Into hostnames in the packet headers displayed Packet Capture Results and Output Summary Web Packet Capture Results and Output Summary Using CLI Diagnostic Commands To quit the ping command, press Ctrl-CCLI ping Command Options Pinging Hosts from the CLI Do-not-fragment Following is sample output from a ping command Checking Mpls Connections from the CLI Pinging RSVP-Signaled LSPs and LDP-Signaled LSPs Following is sample output from a ping mpls command CLI ping mpls l3vpn Command Options Following is sample output from a ping mpls l3vpn commandPinging Layer 3 VPNs CLI ping mpls l2vpn Command Options Following is sample output from a ping mpls l2vpn commandPinging Layer 2 VPNs CLI ping mpls l2circuit Command Options Pinging Layer 2 Circuits Using the traceroute Command To quit the traceroute command, press Ctrl-CCLI traceroute Command Options Tracing Unicast Routes from the CLI Using the traceroute monitor Command Following is sample output from a traceroute commandGateway address Inet6 CLI traceroute monitor Command Options To quit the traceroute monitor command, press QOn page 240 summarizes the output fields of the display CLI traceroute monitor Command Output Summary Tracing Multicast Routes from the CLI Using the mtrace from-source Command CLI mtrace from-source Command Options On page 243 summarizes the output fields of the display Using the mtrace monitor Command CLI mtrace from-source Command Output Summary CLI mtrace monitor Command Output Summary Displaying Log and Trace Files from the CLI Using the monitor interface Command Monitoring Interfaces and Traffic from the CLICLI monitor interface Output Control Keys CLI monitor interface traffic Output Control Keys Using the monitor traffic Command User@host monitor interface fe-0/0/0 CLI monitor traffic Command Options CLI monitor traffic Match Conditions Option Description BriefExtensive Match Condition Description Directional CLI monitor traffic Logical Operators Arithmetic OperatorBinary Operator Relational Operator Following is sample output from the monitor traffic command Page Packet Capture Terms Configuring Packet CapturePacket Capture Terms Packet Capture Overview Packet Capture Terms Packet Capture on Router Interfaces Configuring Packet CaptureFirewall Filters for Packet Capture Packet Capture Files Analysis of Packet Capture Files Configuring Packet Capture with a Configuration Editor Enabling Packet Capture Required Enabling Packet Capture Navigate to the Forwarding options Configuring Packet Capture on an Interface Required Configuring a Firewall Filter for Packet Capture OptionalConfiguring Packet Capture on an Interface 259 Edit firewall Configuring a Firewall Filter for Packet Capture192.168.1.1/32 Enter set packet-capture disable Disabling Packet CaptureDeleting Packet Capture Files 261 Return to the CLI operational mode User@host start shellCd /var/tmp Rm pcap-file.fe.0.0.0 Displaying a Packet Capture Configuration Verifying Packet CaptureMv pcap-file.fe.0.0.0 pcap-file.fe.0.0.0.chdsl Verifying Packet Capture Verifying Captured Packets Return to the CLI configuration mode Ftp lcd /var/tmp Local directory now /cf/var/tmpFtp bye Goodbye Edit User@host# Verifying Captured Packets Meaning Verify that the output shows the intended packets Configuring RPM Probes RPM Terms RPM Overview RPM ProbesRPM target RPM test Configuring RPM Probes RPM TestsProbe and Test Intervals Jitter Measurement with Hardware Timestamping RPM Statistics RPM StatisticsRound-Trip Times Inbound and Outbound Times Icmp Timestamp Probes Only RPM Thresholds and Traps Configuring RPM with Quick ConfigurationRPM for BGP Monitoring Configuring RPM with Quick Configuration RPM Quick Configuration SummaryPerformance Probe Owners Router Advanced WAN Access Configuration Guide Maximum Probe Thresholds Generates Snmp traps when the threshold for standard Configuring RPM with a Configuration Editor Configuring Basic RPM ProbesConfiguring RPM with a Configuration Editor Performance Probe Server Configuring Basic RPM Probes Edit services rpmClick Configure Set probe customerA Edit services rpm probe customerA 192.178.16.5Set test icmp-test probe-frequency Set test icmp-test probe-type icmp-ping-timestamp Configuring TCP and UDP Probes Configuring TCP and UDP Probes Router a Configuration Router B Configuration Tuning RPM Probes Tuning RPM ProbesCustomerA Set probe-limit Configuring RPM Probes to Monitor BGP Neighbors Configuring RPM Probes for BGP Monitoring Configuring RPM Probes to Monitor BGP Neighbors Verifying an RPM Configuration Directing RPM Probes to Select BGP RoutersDirecting RPM Probes to Select BGP Routers Add new entry Verifying RPM Services Verifying RPM ServicesVerifying RPM Statistics Verifying RPM Statistics Verifying RPM Probe Servers Verifying RPM Probe Servers Index on IndexIndex Series Services Router Administration Guide Index Symbols 112 Chassis Dd utility, for compact flash recovery 192 Snmp health monitor System logs Dhcp Snmp Junos Internet software Diagnosing problems from 210 Monitoring from 102 See also Snmp Permissions Radius CLI See also RPM probes Preparation Serial number Chassis components BGP TACACS+ Routing Engine, too warm Upgrades Version Hardware, displaying